$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/73AC68F9F57E709948037DADDAC8DC88616BF980.mft File: 73AC68F9F57E709948037DADDAC8DC88616BF980.mft (raw, json) Hash identifier: OIWXstkrSMnqG3FBGs1M0Zyy54uxyNs6Qogx1wu8Z2s= Subject key identifier: 14:D8:43:DA:96:03:C1:31:C8:5D:0D:34:64:A6:A1:9D:E8:BD:61:EA Authority key identifier: 73:AC:68:F9:F5:7E:70:99:48:03:7D:AD:DA:C8:DC:88:61:6B:F9:80 Certificate issuer: /CN=73AC68F9F57E709948037DADDAC8DC88616BF980 Certificate serial: 4610DA5804864F4BB53788DF55D83F6D47AD8994 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/73AC68F9F57E709948037DADDAC8DC88616BF980.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/73AC68F9F57E709948037DADDAC8DC88616BF980.mft Manifest number: F6 Signing time: Mon 02 Nov 2026 07:42:00 +0000 Manifest this update: Mon 02 Nov 2026 07:37:00 +0000 Manifest next update: Tue 03 Nov 2026 09:57:00 +0000 Files and hashes: 1: 3136302e3139312e3130362e302f32332d3234203d3e20313533313433.roa (hash: vd1S4Z6+zmIZSCdC4Qdy1PZIz8w97xUXmpTWkwwvVQE=) 2: 73AC68F9F57E709948037DADDAC8DC88616BF980.crl (hash: AkkTR3CJ0qNbSt+0jfDbrl/2Z3XTo+FA68/u4gbQaz8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/73AC68F9F57E709948037DADDAC8DC88616BF980.crl rsync://rpki-rsync.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/73AC68F9F57E709948037DADDAC8DC88616BF980.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/73AC68F9F57E709948037DADDAC8DC88616BF980.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 09:57:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:10:da:58:04:86:4f:4b:b5:37:88:df:55:d8:3f:6d:47:ad:89:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73AC68F9F57E709948037DADDAC8DC88616BF980 Validity Not Before: Nov 2 07:37:00 2026 GMT Not After : Nov 3 09:57:00 2026 GMT Subject: CN=14D843DA9603C131C85D0D3464A6A19DE8BD61EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:41:62:39:d5:b0:27:01:01:3b:3a:12:77:60: 5f:0a:51:3b:a3:56:cc:b6:d8:cc:75:49:2c:8f:4e: ba:2f:65:8a:c1:f7:98:73:39:f2:5f:7d:7f:93:a8: 26:91:bc:53:84:ba:2d:2f:ef:9e:8f:49:b8:99:8f: 7b:63:77:9b:4d:e5:d1:88:e8:c3:a8:e4:f5:6a:15: ea:53:3d:9b:bf:ba:fd:d6:3c:ba:6f:62:41:37:05: b1:a6:5a:b4:54:6e:a0:bc:66:4a:b7:24:0a:b1:b2: 11:e9:73:36:c8:4a:aa:4f:c1:05:43:ec:4a:87:94: 50:5b:67:55:1a:28:a1:91:4b:a4:a4:9e:cd:4d:30: 9a:a9:48:d9:a7:04:9f:58:6e:43:62:08:a5:0e:12: 9d:31:e6:2c:67:fe:3e:fb:0f:2b:7b:ae:a8:7d:b6: ce:89:90:9a:81:7e:b4:07:51:a4:6b:a3:b3:b6:0d: a9:69:1a:8c:c9:fc:9a:31:f7:65:b3:bc:24:a8:c6: df:76:f2:0b:d1:32:ea:5f:7b:8d:02:03:1c:ab:53: 38:b7:6c:ea:77:dd:3c:b8:b2:93:2d:03:48:d9:a2: a2:76:45:d8:ef:d4:1f:0e:3d:c6:2c:21:d7:e3:c5: fa:90:74:e9:62:f9:08:d4:14:b0:da:3b:82:fb:18: 23:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:D8:43:DA:96:03:C1:31:C8:5D:0D:34:64:A6:A1:9D:E8:BD:61:EA X509v3 Authority Key Identifier: keyid:73:AC:68:F9:F5:7E:70:99:48:03:7D:AD:DA:C8:DC:88:61:6B:F9:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/73AC68F9F57E709948037DADDAC8DC88616BF980.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/73AC68F9F57E709948037DADDAC8DC88616BF980.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/73AC68F9F57E709948037DADDAC8DC88616BF980.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:c4:52:c0:17:02:69:4d:be:69:1d:a7:e7:81:e6:40:27:f6: 41:f9:e9:46:14:6f:ab:bd:28:47:01:26:1d:e6:ca:e5:77:c1: e7:34:08:38:b2:71:b0:cd:af:cf:8f:e3:dd:cd:1c:db:18:66: 62:bc:71:c8:07:16:3f:33:1e:73:f6:e0:86:fa:dc:64:84:06: a3:c5:83:a4:7f:e4:fc:76:b2:48:a5:2c:db:63:64:55:e3:3d: f6:58:d6:2d:f4:26:0e:62:77:e9:df:fb:7b:19:52:31:37:9b: b9:04:88:9e:66:be:d1:29:82:5f:f7:ed:7c:fa:06:00:84:51: fc:3d:97:7d:b1:3f:a6:49:25:21:7c:bb:97:95:a8:b6:f0:90: 2f:3d:8c:69:99:e2:51:b6:33:87:d7:0f:4c:32:1f:2c:4f:e9: 39:1f:32:ab:9c:ce:3e:11:c8:43:a5:0b:c6:a1:44:b9:1a:19: 66:01:57:c4:f7:00:02:c0:b9:f9:b3:f5:de:63:d9:00:37:98: a9:34:97:80:64:a0:a8:38:7f:1c:bd:81:1b:40:86:42:36:f4: 62:29:0b:9b:66:0e:1b:ec:cd:b4:af:2f:fb:4f:14:40:f1:89: a0:f8:c0:36:44:66:75:03:ba:29:f7:c1:34:e4:fd:8b:74:ac: 5d:fb:33:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURhDaWASGT0u1N4jfVdg/bUetiZQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzNBQzY4RjlGNTdFNzA5OTQ4MDM3REFEREFDOERDODg2 MTZCRjk4MDAeFw0yNjExMDIwNzM3MDBaFw0yNjExMDMwOTU3MDBaMDMxMTAvBgNV BAMTKDE0RDg0M0RBOTYwM0MxMzFDODVEMEQzNDY0QTZBMTlERThCRDYxRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuQWI51bAnAQE7OhJ3YF8KUTuj Vsy22Mx1SSyPTrovZYrB95hzOfJffX+TqCaRvFOEui0v756PSbiZj3tjd5tN5dGI 6MOo5PVqFepTPZu/uv3WPLpvYkE3BbGmWrRUbqC8Zkq3JAqxshHpczbISqpPwQVD 7EqHlFBbZ1UaKKGRS6Skns1NMJqpSNmnBJ9YbkNiCKUOEp0x5ixn/j77Dyt7rqh9 ts6JkJqBfrQHUaRro7O2DalpGozJ/Jox92WzvCSoxt928gvRMupfe40CAxyrUzi3 bOp33Ty4spMtA0jZoqJ2Rdjv1B8OPcYsIdfjxfqQdOli+QjUFLDaO4L7GCObAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFNhD2pYDwTHIXQ00ZKahnei9YeowHwYDVR0j BBgwFoAUc6xo+fV+cJlIA32t2sjciGFr+YAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWU4NTVlOGEtM2ZmOC00N2ZmLWFhZWMtNDhkOGIzODBhOTA0LzAvNzNBQzY4RjlG NTdFNzA5OTQ4MDM3REFEREFDOERDODg2MTZCRjk4MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC83M0FDNjhGOUY1N0U3MDk5NDgwMzdEQUREQUM4REM4ODYxNkJG OTgwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWU4NTVlOGEtM2ZmOC00N2ZmLWFh ZWMtNDhkOGIzODBhOTA0LzAvNzNBQzY4RjlGNTdFNzA5OTQ4MDM3REFEREFDOERD ODg2MTZCRjk4MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEXEUsAXAmlNvmkdp+eB5kAn9kH56UYUb6u9 KEcBJh3myuV3wec0CDiycbDNr8+P493NHNsYZmK8ccgHFj8zHnP24Ib63GSEBqPF g6R/5Px2skilLNtjZFXjPfZY1i30Jg5id+nf+3sZUjE3m7kEiJ5mvtEpgl/37Xz6 BgCEUfw9l32xP6ZJJSF8u5eVqLbwkC89jGmZ4lG2M4fXD0wyHyxP6TkfMquczj4R yEOlC8ahRLkaGWYBV8T3AALAufmz9d5j2QA3mKk0l4BkoKg4fxy9gRtAhkI29GIp C5tmDhvszbSvL/tPFEDxiaD4wDZEZnUDuin3wTTk/Yt0rF37M50= -----END CERTIFICATE-----Generated at Mon Nov 2 22:11:43 2026 by rpki-client